linux.git - Clone of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Age	Commit message (Expand)	Author	Files	Lines
2024-03-15	lsm: fix default return value of the socket_getpeersec_*() hooks	Ondrej Mosnacek	1	-4/+27
2024-03-15	lsm: make security_socket_getpeersec_stream() sockptr_t safe	Paul Moore	4	-35/+32
2024-03-06	tomoyo: fix UAF write bug in tomoyo_write_control()	Tetsuo Handa	1	-1/+2
2024-02-23	lsm: fix the logic in security_inode_getsecctx()	Ondrej Mosnacek	1	-1/+13
2024-02-23	lsm: new security_file_ioctl_compat() hook	Alfred Piccioni	4	-0/+48
2024-01-25	apparmor: avoid crash when parsed profile name is empty	Fedor Pchelkin	1	-0/+4
2024-01-25	selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket	Mickaël Salaün	1	-0/+7
2024-01-05	keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry	David Howells	4	-22/+37
2023-12-08	ima: annotate iint mutex to avoid lockdep false positive warnings	Amir Goldstein	1	-11/+37
2023-11-28	ima: detect changes to the backing overlay file	Mimi Zohar	3	-1/+22
2023-10-10	ima: rework CONFIG_IMA dependency block	Arnd Bergmann	1	-11/+6
2023-10-10	ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig	Oleksandr Tymoshenko	1	-2/+2
2023-10-10	Smack:- Use overlay inode label in smack_inode_copy_up()	Vishal Goel	1	-1/+1
2023-10-10	smack: Retrieve transmuting information in smack_inode_getsecurity()	Roberto Sassu	1	-4/+18
2023-10-10	smack: Record transmuting in smk_transmuted	Roberto Sassu	2	-12/+30
2023-09-19	smackfs: Prevent underflow in smk_set_cipso()	Dan Carpenter	1	-1/+1
2023-09-19	ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig	Nayna Jain	1	-12/+0
2023-09-19	security: keys: perform capable check only on privileged operations	Christian Göttsche	1	-3/+8
2023-08-30	selinux: set next pointer before attaching to list	Christian Göttsche	1	-1/+1
2023-08-26	IMA: allow/fix UML builds	Randy Dunlap	1	-1/+1
2023-07-27	security: keys: Modify mismatched function name	Jiapeng Chong	1	-1/+1
2023-07-27	keys: Fix linking a duplicate key to a keyring's assoc_array	Petr Pavlu	1	-11/+24
2023-07-27	integrity: Fix possible multiple allocation in integrity_inode_get()	Tianjia Zhang	1	-6/+9
2023-07-27	apparmor: fix missing error check for rhashtable_insert_fast	Danila Chernetsov	1	-2/+7
2023-07-27	ima: Fix build warnings	Roberto Sassu	2	-1/+5
2023-07-27	evm: Complete description of evm_inode_setattr()	Roberto Sassu	1	-0/+2
2023-06-09	selinux: don't use make's grouped targets feature yet	Paul Moore	1	-1/+5
2023-05-17	selinux: ensure av_permissions.h is built when needed	Paul Moore	1	-1/+1
2023-05-17	selinux: fix Makefile dependencies of flask.h	Ondrej Mosnacek	1	-2/+2
2023-04-05	keys: Do not cache key in task struct if key is requested from kernel thread	David Howells	1	-3/+6
2023-03-11	ima: Align ima_file_mmap() parameters with mmap_file LSM hook	Roberto Sassu	2	-5/+9
2023-02-01	tomoyo: fix broken dependency on *.conf.default	Masahiro Yamada	1	-1/+1
2023-01-14	device_cgroup: Roll back to original exceptions after copy failure	Wang Weiyang	1	-4/+29
2023-01-14	ima: Fix a potential NULL pointer access in ima_restore_measurement_list	Huaxin Lu	1	-1/+4
2023-01-14	efi: Add iMac Pro 2017 to uefi skip cert quirk	Aditya Garg	1	-0/+1
2023-01-14	ima: Simplify ima_lsm_copy_rule	GUO Zihua	1	-7/+3
2023-01-14	LoadPin: Ignore the "contents" argument of the LSM hooks	Kees Cook	1	-12/+18
2023-01-14	apparmor: Fix memleak in alloc_ns()	Xiu Jianfeng	1	-1/+1
2023-01-14	apparmor: Use pointer to struct aa_label for lbs_cred	Xiu Jianfeng	1	-2/+2
2023-01-14	apparmor: Fix abi check to include v8 abi	John Johansen	1	-1/+1
2023-01-14	apparmor: fix lockdep warning when removing a namespace	John Johansen	1	-1/+1
2023-01-14	apparmor: fix a memleak in multi_transaction_new()	Gaosheng Cui	1	-1/+3
2023-01-14	ima: Fix misuse of dereference of pointer in template_desc_init_fields()	Xiu Jianfeng	1	-2/+2
2023-01-14	integrity: Fix memory leakage in keyring allocation error path	GUO Zihua	1	-1/+5
2023-01-14	ima: Handle -ESTALE returned by ima_filter_rule_match()	GUO Zihua	1	-9/+32
2023-01-14	ima: Fix fall-through warnings for Clang	Gustavo A. R. Silva	2	-0/+3
2022-11-10	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	Gaosheng Cui	1	-2/+4
2022-10-30	selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()	GONG, Ruiqi	3	-5/+6
2022-10-26	hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero	Kees Cook	1	-4/+10
2022-10-26	hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO	Kees Cook	1	-1/+4